PT-2000-1690 · Lyris · Lyris Listmanager

Publicado 2000-10-20 · Atualizado 2008-09-05 · CVE-2000-0758

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lyris List Manager versions 3 and 4

Description The issue allows list subscribers to gain administrative access through the web interface by modifying the value of the list admin hidden form field.

Recommendations For Lyris List Manager versions 3 and 4, consider restricting access to the web interface until a fix is available, and avoid using the list admin hidden form field to prevent exploitation.

Correção

Identificadores relacionados

CVE-2000-0758

Produtos afetados

Lyris Listmanager

Referências · 5

• http://archives.neohapsis.com/archives/bugtraq/2000-08/0149.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0758 · Nota de Segurança
• http://lyris.com/lm/lm_updates.html · Nota
• http://securityfocus.com/bid/1584 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0758 · Nota